Hi,
we have a requirement to configure the ServiceNow Security Operations Add on to use a proxy url, proxy port and also a certificate for the proxy.
I can see there are option to specify proxy_url & proxy_port. Is it also possible to also integrate the certificate of our proxy? Does it need to be done within the add on or within Splunk or at the OS/Linux level?
thanks
Try these steps:-
1. First, you need to convert zscaler certificate to .pem or get from the customer.
openSSL x509 -in ZscalerRootCertificate-2048-SHA256.crt -out zscaler.pem -outform PEM
2. Insert .pem into o365 app cacert
cat zscaler.pem >> /opt/splunk/etc/apps/splunk_ta_o365/bin/3rdparty/certifi/cacert.pem
3. Ensure ownership
chown splunk:splunk *
4. Restart splunk
----------------------------------------------
If this helps like will be appreciated.
below thread might help you: